nerdexam
Microsoft

AZ-204 · Question #494

You are building an application to track cell towers that are available to phones in near real time. A phone will send information to the application by using the Azure Web PubSub service. The data wi

The correct answer is D. WebHook-Request-Origin. https://learn.microsoft.com/en-us/azure/azure-web-pubsub/howto-develop- eventhandler#upstream-and-validation

Submitted by eva_at· Mar 30, 2026Connect to and consume Azure services and third-party services

Question

You are building an application to track cell towers that are available to phones in near real time. A phone will send information to the application by using the Azure Web PubSub service. The data will be processed by using an Azure Functions app. Traffic will be transmitted by using a content delivery network (CDN). The Azure function must be protected against misconfigured or unauthorized invocations. You need to ensure that the CDN allows for the Azure function protection. Which HTTP header should be on the allowed list?

Options

  • AAuthorization
  • BWebHook-Request-Callback
  • CResource
  • DWebHook-Request-Origin

How the community answered

(59 responses)
  • A
    15% (9)
  • B
    7% (4)
  • C
    3% (2)
  • D
    75% (44)

Explanation

https://learn.microsoft.com/en-us/azure/azure-web-pubsub/howto-develop- eventhandler#upstream-and-validation

Topics

#Azure Web PubSub#CDN#webhook validation#WebHook-Request-Origin

Community Discussion

No community discussion yet for this question.

Full AZ-204 Practice